package com.example.demo.controller;

import com.example.demo.common.AppVariable;
import com.example.demo.common.PasswordUtils;
import com.example.demo.common.ResultAjax;
import com.example.demo.model.Userinfo;
import com.example.demo.model.vo.UserinfoVO;
import com.example.demo.service.UserService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

@RestController
@RequestMapping("/user")
public class UserController {
    @Autowired
    private UserService userService;

    //注入功能
    @RequestMapping("/reg")
    public ResultAjax reg(Userinfo userinfo){
        //1、效验参数
        if(userinfo==null ||!StringUtils.hasLength(userinfo.getUsername())||
                !StringUtils.hasLength(userinfo.getPassword())){
            //参数异常
            return ResultAjax.fail(-1,"非法参数");
        }
        //密码加盐
        userinfo.setPassword(PasswordUtils.encrypt(userinfo.getPassword()));
        //2、请求service进行添加操作
        int result=userService.reg(userinfo);
        //3、将执行结果返回给前端
        return ResultAjax.succ(result);
    }

    //登录操作
    @RequestMapping("/login")
    public ResultAjax login(UserinfoVO userinfoVO, HttpServletRequest request){
        //1、参数效验
        if(userinfoVO==null||!StringUtils.hasLength(userinfoVO.getUsername())||
                !StringUtils.hasLength(userinfoVO.getPassword())){
            //非法登录
            return  ResultAjax.fail(-1,"参数有误！");
        }

        //2、根据用户名查询对象
        Userinfo userinfo=userService.getUserByName(userinfoVO.getUsername());
        if(userinfo==null||userinfo.getId()==0){
            //不存在此用户
            return ResultAjax.fail(-2,"用户名或密码错误");
        }

        //3、使用对象中的密码和用户输入的密码进行比较：userinfoVO.getPassword().equals(userinfo.getPassword())
        //加盐解密
        if(!PasswordUtils.decrypt(userinfoVO.getPassword(),userinfo.getPassword())){
            //密码错误
            return ResultAjax.fail(-2,"用户名或密码错误");
        }

        //4、比较成功，将对象存储到session中
        HttpSession session=request.getSession();
        session.setAttribute(AppVariable.SESSION_USERINFO_KEY,userinfo);

        //5、将结果返回给用户
        return ResultAjax.succ(1);
    }

    //注销
    @RequestMapping("/logout")
    public ResultAjax logout(HttpServletRequest request) {
        HttpSession session = request.getSession(false);
        if (session != null && session.getAttribute(AppVariable.SESSION_USERINFO_KEY) != null) {
            session.removeAttribute(AppVariable.SESSION_USERINFO_KEY);
        }
        return ResultAjax.succ(1);
    }

}
